net-ops/global/overlay/etc/puppet/cosmos-rules.yaml

129 lines
3.1 KiB
YAML

---
# Note that the matching is done with re.match()
.*\.sunet\.se$:
net:
infra_ca_rp:
sunet::nagios::nrpe:
checks:
- nrpe_check_apt
- nrpe_check_dynamic_disk
- nrpe_check_entropy
- nrpe_check_load
- nrpe_check_memory
- nrpe_check_ntp_time
- nrpe_check_reboot
- nrpe_check_scriptherder
- nrpe_check_total_procs_lax
- nrpe_check_uptime
- nrpe_check_users
- nrpe_check_zombie_procs
sunet::server:
disable_all_local_users: true
disable_ipv6_privacy: true
install_scriptherder: true
unattended_upgrades: true
sunet::invent::client:
export_endpoint: https://ni-frontend-test.sunet.se
invent_retention_days: 1
baas2-backuptest-prod-1.sunet.se:
net::baas2_restoretest:
node_type: 'backupnode'
sunet::baas2:
nodename: 378A9E0ADCC5
backup_dirs:
- '/opt/backup-test'
baas2-restoretest-prod-1.sunet.se:
net::baas2_restoretest:
node_type: 'restorenode'
backup_nodename: 378A9E0ADCC5
sunet::baas2:
nodename: B0DA416B08FC
backup_dirs:
- '/opt/baas2'
metrics-cd-test-1.sunet.se:
sunet::certbot::acmed:
sunet::dockerhost2:
sunet::influx:
servicename: metrics-cd-test.sunet.se
influxdb2_tag: ci-docker-influxdb2-292
legacy_settings: false
influx_producer_networks:
- '130.242.121.23/32' # vpn1.sunet.se
- '192.36.171.97/32' # graph-internal-1.sunet.se
monitornetops-sto1-prod-1.sunet.se:
sunet::dockerhost2:
sunet::naemon_monitor:
domain: monitor-netops.sunet.se
naemon_tag: v2024-03-05-01
thruk_tag: v2024-02-12-01
histou_tag: v2023-10-04-02
nagflux_tag: v2023-10-04-01
thruk_admins:
- mariah@sunet.se
- pahol@sunet.se
- paulo@sunet.se
- jonas@sunet.se
- salu@sunet.se
- thorslund@sunet.se
thruk_users:
- '*@sunet.se'
default_host_group: sunet::nagios::nrpe
nrpe_group: sunet::nagios::nrpe
naemon_extra_volumes:
- /etc/naemon/conf.d/netops:/etc/naemon/conf.d/netops:ro
pahol-test1.sunet.se:
sunet::baas2:
version: 8.1.22.0
install_tbmr: true
nodename: 6BA7708D7A1E
exclude_list:
- '/home/no-backup/.../*'
- '/root/no-backup/.../*'
pypi-1.sunet.se:
sunet::pypi:
sunet::dockerhost2:
sunet::dehydrated::client:
domain: pypi.sunet.se
sunet::baas2:
nodename: A8P9U1IAR58I
backup_dirs:
- '/opt/pypi/packages'
sunet::server:
disable_ipv6_privacy: true
unattended_upgrades: true
ntpd_config: false
sshd_config: false
test-das-federator.lab.sunet.se:
sunet::certbot::acmed:
karchive.sunet.se:
sunet::dockerhost2:
net::karchive:
docker_tag: latest
git_repo_url: ssh://git@platform.sunet.se:22022/Network/configuration-backup.git
git_user: /root
lb-sthb-test-1.sunet.se:
sunet::dockerhost2:
sunet::lb::load_balancer:
interface: 'ens3'
lb-tug-test-1.sunet.se:
sunet::dockerhost2:
sunet::lb::load_balancer:
interface: 'ens3'
nifrontend-sto1-prod-1.sunet.se:
sunet::dockerhost2:
sunet::invent::receiver:
vhost: nifrontend-sto1-prod-1.sunet.se
sunet::invent::scanner:
image_path: '/opt/receiver/images'
install_docker_io: false